nginx+openssl自定义https证书

生成证书的申请文件和私钥文件

openssl req -nodes -newkey rsa:2048 -out blog.pem -keyout blog.key

颁发证书

openssl req -in blog.pem -x509 -key blog.key -out blog.crt -days 3650

nginx配置文件

server{
    listen 443 ssl;
    server_name x.x.x.x;
    ssl_certificate     ./ssl/blog.crt;
    ssl_certificate_key ./ssl/blog.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_session_timeout  30m;
    ssl_session_cache    shared:SSL:10m;

    root html;
    location / {
        index index.html;
    }
}